Skip to main content
IG-Smart — Governance, Risk & Assurance

Engagements & investment

A buying guide to engagements and investment

Governance and assurance work varies according to scope, complexity, regulatory exposure, geography, existing maturity and the evidence already available. We publish indicative investment levels so organisations can determine commercial fit before requesting our time.

  • Defined-scope engagements

    Typical investment: £7,500–£30,000+ + VAT

    For defined reviews, readiness assessments, assurance exercises, remediation planning and other specified deliverables.

    Smaller engagements normally start from approximately £7,500.

  • Managed & retained services

    Typical investment: £2,500–£8,000+ + VAT per month

    For ongoing DPO, governance, assurance and other retained senior-practitioner support.

    Service-specific ranges vary; see the relevant capability page for indicative pricing. Complex, multi-entity or international requirements may exceed this range.

  • Complex & enterprise programmes

    Starting investment: £25,000 + VAT

    For multi-workstream, multi-country, transformation or high-complexity assignments requiring phased delivery.

    Investment is agreed following scoping and may materially exceed the entry point for major programmes.

No open-ended billing. Scope, deliverables, assumptions and fees are agreed in writing before work begins. We do not introduce material additional fees without agreement. Where requirements change, the impact on scope, timing and fees is discussed and agreed before additional work proceeds.

What determines the final fee?

  • Number of entities or business units
  • Jurisdictions in scope
  • Organisation size and operating complexity
  • Regulatory and contractual requirements
  • Maturity of the existing governance environment
  • Quality and completeness of current evidence
  • Number of systems, suppliers or products in scope
  • Remediation support required
  • Urgency or a fixed procurement deadline
  • Onsite requirements
  • Reporting and stakeholder requirements
  • Project versus retained delivery

Published ranges are indicative, not a quotation. A scoped proposal confirms the fee.

How investment differs by service

Each service has its own indicative investment, reflecting the type of work involved. Where no figure is shown, the service is priced according to scope.

ServiceEngagementStarting investmentTypical investment
Fractional & Outsourced DPO Services
Outsourced / Fractional DPO
Managed & retained service£2,500 + VAT per month£3,000–£7,500+ + VAT per month for more complex organisations
Information Governance Consultancy
Information Governance assessment / programme
Defined-scope engagement£7,500 + VAT£10,000–£30,000+ + VAT
Cyber Governance & Assurance
Cyber Governance / ISO readiness
Defined-scope engagement£10,000 + VAT£12,500–£35,000+ + VAT
Supplier Assurance
Project or managed service, priced according to supplier population and depth of assessmentPriced by scope—
AI Governance & Assurance
AI Governance assessment / assurance
Defined-scope engagement£12,500 + VAT£12,500–£15,000 + VAT
AI governance build / programme
Phased programme£25,000 + VATLarger programmes individually scoped
Managed AI Governance
Managed & retained service£5,000 + VAT per monthSubject to service scope
HealthTech Governance & Clinical Safety
DSPT / NHS assurance
Defined-scope engagement£7,500 + VAT£10,000–£25,000+ + VAT
DTAC readiness / assurance
Defined-scope engagement£7,500 + VAT£7,500–£10,000 + VAT
Clinical safety / DCB0129 & DCB0160
Scoped individuallyPriced by scope—
Governance Assurance & Board Reporting
Independent Assurance / Board Reporting
Defined-scope engagement£10,000 + VAT£12,500–£35,000+ + VAT

Project versus retained work

Defined-scope engagements deliver a specified outcome — an assessment, readiness exercise, assurance review or remediation plan — against an agreed scope, deliverables, assumptions and written fee.

Managed and retained services provide ongoing support, such as an outsourced DPO or continuing assurance, against an agreed service scope and recurring monthly fee.

Why scope, risk and complexity affect the fee

The same requirement can involve very different work. A single-entity organisation with current policies and organised evidence needs less senior time than a multi-entity group with gaps, regulatory exposure or a fixed procurement deadline.

Higher-risk processing, regulated sectors, more systems or suppliers in scope and more demanding board or regulator reporting all increase the depth of review and evidence required. Scoping first means the fee reflects the work actually needed.

Defined outcome, defined scope, defined investment

We price the outcome you need rather than leading with consultant days. Day rates can be provided for procurement schedules, framework responses or genuinely time-based advisory work.

Normally included

The professional services, agreed deliverables, reporting and ordinary remote delivery activities expressly set out in the agreed scope.

Normally excluded unless expressly stated

Third-party licences or services, independent certification or assessment-body charges, specialist external testing, substantial travel/accommodation and other external costs not included in the agreed scope.

VAT and expenses

Fees are stated exclusive of VAT unless expressly indicated otherwise. Any material travel, accommodation or third-party expense will be agreed in advance where it falls outside the agreed fee.

Changes to scope

We do not introduce material additional fees without agreement. Where requirements change, the impact on scope, timing and fees is discussed and agreed before additional work proceeds.

Enterprise and multi-country programmes

Multi-workstream, multi-entity or international programmes are scoped in phases, with the commercial structure agreed to reflect scope, duration and delivery requirements.

Indicative range versus binding proposal

Published ranges help you judge commercial fit. They are not a quotation. The fee is confirmed only in a scoped written proposal.

What happens after you submit a requirement

  1. A senior practitioner reviews the requirement and the context you provide.
  2. We arrange a conversation to confirm objectives, scope, constraints and timing.
  3. You receive a written proposal setting out scope, deliverables, assumptions and fee.
  4. Work begins only once the scope and fee are agreed in writing.

Procurement, tenders and RFPs

If you are running a formal procurement, tender or RFP, submit a requirement with your timetable and documents. Day rates can be provided for procurement schedules and framework responses, and supporting assurance material is available through the Trust Centre.

Choosing the right next step

Is IG-Smart the right commercial fit?

Our work is designed for organisations where governance, regulatory compliance, assurance or procurement requirements carry material business consequences. Defined-scope consulting engagements generally begin from approximately £7,500 + VAT, while managed services generally begin from approximately £2,500 + VAT per month.

If that investment level is broadly consistent with your requirement, we would be pleased to discuss the appropriate scope.

Receive a formal quotation

A fee is confirmed only in a scoped written proposal.